Identity Authentication

The first requirement for all Individual Validated Code Signing Certificates – regardless of what Certificate Authority (CA) is issuing it – is Identity Authentication. Here the CA will attempt to verify the identity of the individual applying for the certificate.

What is Identity Authentication?

To satisfy the Identity Authentication requirement, the CA will need to make sure that you are who you say you are. That means verifying the personal identity of the applicant. The applicant's identity can be proven by completing a Notary ID form. This form must be notarized by a licensed Notary Public, or your country's equivalent of a Notary Public. The CA will send you the ID form via email, or you can download it when you fill out the initial application.

In addition to the form, you will also need to send some additional documentation. The best way to explain this is by breaking it down by CA.

For DigiCert & Thawte Brands:

You will need to send one, or possibly two forms of ID. The easiest way is to send a copy of a valid passport. The passport must contain your full name and your photograph.

If you don't have a valid passport, there is a workaround but it requires two forms of ID. The first form must be a Government-Issued ID that contains your full name and photo, possible options are:

You will also need to send in a secondary form of ID in addition to the Government-Issued ID. This needs to include your full name. Examples are:

If you can send DigiCert/Thawte the notarized form, and a passport or two alternative forms of ID, you will have cleared this requirement.

For Comodo Brand:

Comodo is a bit more rigorous in their vetting process. In addition to a required form of Government-Issued Identification, you will also have to send in two forms of secondary evidence.

You may send in the following forms of Government-Issued ID:

In addition to the Government-Issued ID, Comodo also wants two forms of additional documentation. The first form is a financial document that contains your full name. This can be a:

Then Comodo also wants a form of non-financial documentation with your full name on it. Examples of this form of documentation include:

After providing the notarized ID form, plus a copy of your Government-Issued ID and two additional forms of documentation, you will have satisfied Comodo's Individual Authentication requirements.